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About this guide 
About Qualys 


About this guide 


This enrollment guide helps to enroll your mobile devices. 


About Qualys 


Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of cloud-based security and 
compliance solutions. The Qualys Cloud Platform and its integrated apps help businesses 
simplify security operations and lower the cost of compliance by delivering critical 
security intelligence on demand and automating the full spectrum of auditing, 
compliance and protection for IT systems and web applications. 


Founded in 1999, Qualys has established strategic partnerships with leading managed 
service providers and consulting organizations including Accenture, BT, Cognizant 
Technology Solutions, Deutsche Telekom, Fujitsu, HCL, HP Enterprise, IBM, Infosys, NTT, 
Optiv, SecureWorks, Tata Communications, Verizon and Wipro. The company is also a 
founding member of the Cloud Security Alliance (CSA). For more information, please visit 
www.qualys.com. 


Qualys Support 


Qualys is committed to providing you with the most thorough support. Through online 
documentation, telephone help, and direct email support, Qualys ensures that your 
questions will be answered in the fastest time possible. We support you 7 days a week, 
24 hours a day. Access support information at www.qualys.com/support/. 


Device Enrollment 
Supported Platforms 


Device Enrollment 


SEM supports manual and auto enrollment methods for devices. 


Supported Platforms 

- Android (Version 4.4.2 and higher) 
- 10S (Version 9.0 and higher) 

- 1PadOS (Version 13.1 and higher) 


Manual Enrollment 


To get the visibility, security, and continuous monitoring of devices, you must enroll all 
your organization's mobile devices. The enrollment process registers the device, secures 
communication between the device and Qualys Cloud Platform, and facilitates real-time 
monitoring and security. 


You need to follow the steps mentioned in the subsequent sections to enroll your Android 
or 10S or iPadOS devices with Qualys SEM. 


This section contains instructions to enroll Android and 10S/iPadOS devices manually- 
- Android Enrollment 
-10S/iPadOS Enrollment 


- Chrome Enrollment 


Info: To auto-enroll the Android, 10S/IPadOS and Chrome devices, see Automated 
Enrollment. 


Android Enrollment 


These are the steps for manual enrollment. For auto-enrollment, refer Automated 
Enrollment 


Step 1 


Install Qualys Cloud Agent App from Google Play Store. Tap on the URL 
(https://play.google.com/store/apps/details?id=com.qualys.android.agent) to launch 
Google Play. Launch the Agent (app you just downloaded). You will be prompted with the 
following screen. Tap Ok. 


Device Enrollment 
Manual Enrollment 


If Android version is 5.0 and above then following screen will be shown, tap Ok to allow 
usage access to Qualys MDM agent. Once access is allowed, press back button of phone to 
continue the enrollment process. If Android version is below 5.0, then tap Next to 


continue. 


Allow Usage Access 


QAgent needs access to your app 
usage to detect the app compliance 
and better functionality of QAgent. 
We value your privacy. 


Click OK to go to Settings. Then turn 
on Usage Access for QAgent, press 
back to continue the enrollment 
process. 


Step 2 


QAgent solution secures, monitors, manages and supports 
mobile devices deployed across various platforms, service 
providers and enterprises 


(Agent enables the enterprises to securely manage the 
devices. 


To start the enrollment process tap on "Next" button, 


Scan the QR code or enter Server URL mentioned in the User activation email with subject 
"Qualys Secure Enterprise Mobility - Account Activation" and Tap Next. 


Device Enrollment 
Manual Enrollment 


If you don't have email with subject "Qualys Secure Enterprise Mobility - Account 
Activation”, please contact your Qualys Account Manager. 


(9 Qualys. 


Scan QR code 


Enrollment details are sent on your registered email 
address. @ 


Scan QR code 


Enter Server URL 


Device Enrollment 
Manual Enrollment 


Step 35 


If you have scanned the QR code, you will be redirected to step 4. If enrollment is set as 
without SEM EMM for your organization, you will be redirected to step 5, else following 
screen will be shown:. 


© Qualys. 


Enter Your Credentials 


Enrollment details are sent on your registered email 
address. @ 


Username 


Password 


Please refer to User activation emails with subject “Qualys Secure Enterprise Mobility- 
Account Activation” and “Qualys Secure Enterprise Mobility - Account Details” to enter the 
following details: 


- Username 
- Password 


If you don t have the "Qualys Secure Enterprise Mobility - Account Activation" and "Qualys 
Secure Enterprise Mobility - Account Details" email, please contact your Qualys Account 
Manager. 


Step 4 


Tap Activate to activate Qualys agent as device administrator. 


Activate device administrator? 


JC Yu LJ Li - 
Control the length and the characters 
allowed in screen lock passwords and 
PINS 


Monitor screen-unlock attempts 


Monitor the number of incorrect passwords 


Í 


typed. when unlocking the screen, and lock 


the phone or erase all the phone's data if 


too many incorrect passwords are typed 


Lock the screen 


Control how and when the screen locks 


Set screen lock password 
expiration 

Change how frequently the screen lock 
password, PIN, or pattern must be 
changed 


Set storage encryption 


Require that stored app data be encrypted 


Disable cameras 


Prevent use of all device cameras 


Activate this device administrator 


Cancel 


Uninstall app 


Step 5 


Device Enrollment 
Manual Enrollment 


If EULA is not configured for your organization, you will be redirected to step 6. If EULA is 
configured and you have already accepted it, then you will be redirected to step 6, else you 
will be presented with a EULA. If you decline the EULA, you will not be able to enroll the 


device. 


Step 6 


If your organization has set Default Ownership, then Device Ownership drop-down will be 


read-only. Otherwise you will need to select the Device Ownership. 


If the device is owned by Organization, select Corporate - Owned. If it is not owned by 


Organization, select Employee - Owned. 


Enter your phone number in the space provided. 


Device Enrollment 
Manual Enrollment 


© Qualys. 


Choose your Device Ownership 

Device Ownership 

Corporate - Owned x 
Note: Device Ownership cannot be changed once Device is enrolled. 


Fhone Humber 


mm IND +91 + Pptional 


Notes; 


- Enter the phone number of the device being enrolled. For Wi-Fi only 
device, enter your personal phone number 


- If your country is not listed in country code dropdown, then select 
Other às option and please specify the country code starting with “+ in 
Phone Number field 


Step 7 (applicable only for Samsung) 


If the enrollment is set as without SEM EMM for your Organization, then you will be 
redirected to step 10. 


Tap Next to navigate to Google Play Store. 


10 


© Qualys. 


You need to install additional enterprise services app which is 
available on the Google Play Store to complete the enrollment 
process. 


Steps to follow: 


1. Tap on 'Next button to navigate to Google Play Store 
2, Install and open ( Samsung Services app 


3. Activate it as device administrator and accept the Knox 
policy to complete the enrollment process 


1l 


Device Enrollment 
Manual Enrollment 


Device Enrollment 
Manual Enrollment 


Step 8 (applicable only for Samsung) 
Tap Install to install Qualys Service for Samsung app. 


€ Google Play 


Qualys Service for 


ou Samsung 
Qualys Engineering Team 


Business 
INSTALL 


Rated for 3+ (2 


Ge Ge 


Samsung Services Samsung Services 
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Device Enrollment 
Manual Enrollment 


Step 9 (applicable only for Samsung) 


You will be redirected to step 7. After successful installation, tap Next to continue. You are 
almost there! You'll see the following screen. Tap Activate and follow the instructions to 
complete the enrollment. 


Device administrator 


Dp Q Samsung Service 


Activating administrator will allow Q Samsung Service to perform 
the following operations 


* Erase all data 
Erase the tablet's data without warning by performing a 
factory data reset. 


* Change the screen lock 
Change the screen lock. 


* Set password rules 
Control the length and the characters allowed in screen lock 
passwords and PINs. 


* Monitor screen-unlock attempts 
Monitor the number of incorrect passwords typed when 
unlocking the screen and lock the tablet or erase all the tablet's 
data if too many incorrect passwords are typed. 


* Lock the screen 
Control how and when the screen locks. 


* Set screen lock password expiry 
Change how frequently the screen lock password, PIN or 
pattern must be changed. 


* Setstorage encryption 


Require that stored app data be encrypted. 


* Disable cameras 
Prevent use of all device cameras. 


* Set SD card encryption 


Require application on SD card be encrypted 


* Manage applications 
Install, uninstall, disable, enable, and query app state. Restrict 
ability to install or uninstall specific apps 


* Manage Bluetooth policies 


Control Bluetooth profiles and settings. 


* Configure Exchange account 
Create, modify, and delete Exchange ActiveSync account 
settings. 


* Manage roaming policies 


Det rim tha uan nf ennemnime matissnelin 


CANCEL ACTIVATE 
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Device Enrollment 
Manual Enrollment 


Step 1O 


Once your device is successfully configured with your Organization server, you'll be 
redirected to the following screen. 


© Qualys. 


OnePlus 6T 


a 8 + 


Corporate - Owned 


Configuration 


Messages 


Support 


Legal 


Permissions Checklist 


Patch Jobs 


(9 
=> 
Èx 
m 


© Qualys, Inc. All rights reserved | 
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Device Enrollment 
Manual Enrollment 


iOS/IPadOS Enrollment 


These are the steps for manual enrollment. For auto-enrollment, refer Automated 
Enrollment. 


Step 1 


Install Qualys Cloud Agent App from iTune Store. Tap the URL 
(https://itunes.apple.com/app/qualys-agent/1d1484616940) to launch 10S App Store. 


Step 2 


Scan the QR code or enter Server URL mentioned in the User activation email with subject 
"Qualys Secure Enterprise Mobility - Account Activation" and Tap Next. 


If you don't have email with subject "Qualys Secure Enterprise Mobility - Account 
Activation", please contact your Qualys Account Manager. 


Scan QR Code 
Enrollment details are sent on your registered 
email address. 


Scan QR Code 


Enter Server URL 


Next 


© 2020 Qualys, Inc. All rights reserved 
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Device Enrollment 
Manual Enrollment 


Step 35 


After scanning the OR code, you will be redirected to step 4, else the following screen will 
be shown: 


Back © Qualys. 


Enter your credentials 


Enrollment details are sent on your registered email 


address. O 


Usermante 


Password 


Show Password 


Need help? 


2020 Qualys, Inc. All nights reserved 


Please refer to User activation email with subject "Qualys Secure Enterprise Mobility - 
Account Activation" and “Qualys Secure Enterprise Mobility - Account Details" to enter 
following details: 


- Username 
- Password 


If you don t have the "Qualys Secure Enterprise Mobility - Account Activation" and "Qualys 
Secure Enterprise Mobility - Account Details" email, please contact your Qualys Account 
Manager. 
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Device Enrollment 
Manual Enrollment 


Step 4 
If EULA is not configured for your organization, then you will be redirected to Step 5. 


If EULA 1s configured and you have already accepted the EULA, you will be redirected to 
Step 5, else you will be presented with a EULA. 


If you decline the EULA, you will not be able to enroll the device. 


Accept EULA Add Details install Profile 


End User License Agreement 


Please read through and agree to the End User License 
agreement to proceed 


System EULA 


This is Test EULA. 


Agree and Continue | 


© 20270 Qualys, Inc. All rights reserved 
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Device Enrollment 
Manual Enrollment 


Step 5 


If your organization has set Default Ownership, then the respective Device Ownership 
radio button will be selected, and both the radio button will be read-only. Otherwise, you 
will need to select Device Ownership. 


If the device is owned by organization, select Corporate - Owned and if not, select 
Employee - Owned. 


Enter your mobile number in the space provided. 


© Qualys. 
0——90 


Accept EULA Add Details Install Profile 


Details 


Select Ownership 
© Corporate - Owned Employee - Owned 


Nolte: Asset Ownership cannot be changed once asset I$ 
enrolled. 


Mobile Humber 


nae IND+91 + 


Notes: 


- Enter the mobile number of the devices being enrolled. For 
WiFi only devices, enter your personal mobile number 


- If your country is not listed in country code dropdown, then 
select Other as option and please specify the country code 
starting with ‘+ in phone number Meld. 


© 2070 Qualys, Inc. All rights reserved 


18 


Device Enrollment 
Manual Enrollment 


Step 6 


If the enrollment is set as without SEM EMM for your Organization, then you will be 
redirected to Step 10. Else, tap on the Download Profile button to download the profile for 
installation. 


Accept EULA 
Install Prafile 


Profile Service 
Qualys Test Ong 


Hote Past dawnload, launch Settings app amd tap on “Profile 
Downloaded" tab to initiate the installation process. 


Download Profile 


e ds Ouals. Ine. AI ngahts resennmd 
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Device Enrollment 
Manual Enrollment 


Step 7 


If 10S version is 12.2 or later, allow to download the configuration. Then you'll see the 
following popup. Tap Close. 


If iOS version is prior to 12.2, allow to open Settings app, then you'll be redirected to Step 
J, 


Profile Downloaded 
Review the profile in Settings app if 
you want to install it, 


Close 
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Device Enrollment 
Manual Enrollment 


Step 8 
Launch Settings app and tap Profile Downloaded to initiate the installation process. 


Settings 


à, Search 


QDev TestOne 


Apple ID, iCloud, iTunes & App Store 


Finish Setting Up Your iPhone 


Profile Downloaded 


+ Airplane Mode 
Wi-Fi QAccess 


Bluetooth 


5 
a 


Mobile Data 


= 
Ti 
Ea 


VPN 


Notifications 
Sounds & Haptics 
Do Not Disturb 


Screen Time 


© G 8 O 
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Step 9 


Device Enrollment 
Manual Enrollment 


You are almost there! You'll see the following screen, tap Install and follow the 


instructions to complete enrollment. 


4 QAgent 


Cancel Install Profile Install 


Profile Service 


Qualys 


Signed by qualysguard.pO5.eng.sjcO1.qualys.com 
Verified w” 


Description Qualys Enrollment 


Contains Device Enrolment Challenge 


More Details 


27 


Device Enrollment 
Manual Enrollment 


Step 1O 


After profile installation, you need to launch QAgent app to complete the enrollment 
process. 


For 10S 11.3 to 12.1.4 devices, complete the enrollment process using QAgent app. 


If the enrollment is set as without SEM EMM for your organization, then after the 
completion of Step 5 Or after launching QAgent, you will be redirected to following screen. 


Qualys. 


w^ Contacting Server 
w^ Generating CSR 
w^ Downloading Certificate 


^ Securing your device 


2 


Device Enrollment 
Manual Enrollment 


Step 11 
This completes device enrollment and you'll see the following screen. 


© Qualys. 


iPhone 

iPhone 8 
105-11.2.5 
Corporate - Owned 


a server 


a Data Usage 


ffi] Legal 
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Device Enrollment 
Manual Enrollment 


Chrome Enrollment 


Step 1 


Install Qualys Cloud Agent App from Google Play Store. Tap on the URL 
(https://play.google.com/store/apps/details?id=com.qualys.android.agent) to launch 
Google Play. Launch the Agent (app you just downloaded). You will be prompted with the 
following screen. 


Tap OK allow usage access to Qualys MDM agent. 


Allow Usage Access 


QAgent needs access to your app usage to detect the app compliance and better 
functionality of QAgent. We value your privacy 


Click OK to go to Settings. Then turn on Usage Access for QAgent, press back to 
continue the enrollment process 


MRC > x © © © UR & 12:21 


Step 2 


Scan the QR code or enter Server URL mentioned in the User activation email with subject 
"Qualys Secure Enterprise Mobility - Account Activation" and Tap Next. 


If you don't have email with subject "Qualys Secure Enterprise Mobility - Account 
Activation", please contact your Qualys Account Manager. 
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Device Enrollment 
Manual Enrollment 


© Qualys 


Scan QR code 


Enrollment details are sent on your 
registered email address. @ 


Enter Server URL 


-— Next > 


98 @Ooese20 Zy»- 0 ev 


Step 35 


If you have scanned the QR code, you will be redirected to step 4 and the following screen 
will be shown: 


© Qualys 


Enter Your Credentials 


Enrollment details are sent on vour registered email address 0 


Username 


Password 


Next » 


© oO (23 MI" 4:04 
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Device Enrollment 
Manual Enrollment 


Please refer to User activation emails with subject “Qualys Secure Enterprise Mobility- 
Account Activation" and “Qualys Secure Enterprise Mobility - Account Details” to enter the 
following details: 


- Username 
- Password 


If you don't have the “Qualys Secure Enterprise Mobility - Account Activation" and “Qualys 
Secure Enterprise Mobility - Account Details" email, please contact your Qualys Account 
Manager. 


Step 4 


If EULA is not configured for your organization, you will be redirected to step 5. If EULA is 
configured and you have already accepted it, then you will be redirected to step 5, else you 
will be presented with a EULA. If you decline the EULA, you will not be able to enroll the 
device. 


© 


End User License Agreement (EULA) 
Mame Fula configuration 


Description: 


Test EULA configuration 


Step 5 


If your organization has set Default Ownership, then Device Ownership drop-down will be 
read-only. Otherwise, you will need to select the Device Ownership. 


If the device is owned by Organization, select Corporate - Owned. If it is not owned by 
Organization, select Employee - Owned. 


Enter your phone number in the space provided. 
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Device Enrollment 
Manual Enrollment 


Choose your Device Ownership 


Device Ownership 


poms - Cane 
Note Device Ownership cannot be changed once Device is enrolled 


Phone Humber 


=. 


Noles 
- Enter the phone number of the device being enrolled. For Wi-Fi only device, enter your personal phone number 


- f your country is not hated in country code dropdown, then select Other as option and please specify the country code starting with + im Phone Number field 


Step 6 


Once your device is successfully configured with your Organization server, you'll be 
redirected to the following screen. 


Cosporae - Ciel 


> 


TOTIS Qaia, ine. AB regia heer 


L OF di 
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Automated Enrollment 


Automated Enrollment 


System administrators can use any Mobile Device Management (MDM) to remotely 
configure enrollment details of Qualys Cloud agents on managed Android, 10S and iPadOS 
devices. 


Prerequisites 


- In the Configurations > Organization Info > Settings tab > Enrollment Settings, make sure the 
enrollment is set to 'Enroll device without SEM EMM for 10S and Android, i.e., Al] 10S 
devices and ‘All Android devices' check-boxes are selected in the enrollment settings. 


|€ Edit Organization 


EDIT MODE 
Settings 
Enrollment Settings 


uit Ownership of Asset 


Corporate - Owned 


ault Asset Co 


€ Push Poll 


All IOS Devices 


All Android Devices 


Sync Settings 


Recommended values are shown by default. Lowering any of these values wi icrease battery usage and data consumption on your assets 


Note: By default, the ‘All 10S devices and ‘All Android devices check-boxes are not 
selected. You can check these settings in Edit mode only. 


- Make sure that the user is in Active state. 
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Automated Enrollment 


Secure Enterprise Mobility DASHBOARD NVENTORY VULNERABILITIES USERS REPORTS CONFIGURATIONS 


Total Users 


STATUS USER ASSETS MODIFIED ON 


Active prashant 1 Nov 25, 2021 
NO REMAINING FILTERS ishant 4 


Active SFernandez 1 Nov 13, 2021 
Active semuser Ü Aug 19, 2021 
Active sahirrao 15 Aug 19, 2021 


Active djprakash123 Ü Jul 31, 2021 


- Android devices with Android 5 or later 
- 1OS devices with 1OS 9 or later and iPadOS devices with 1PadOS 13.1 or later 


- Enterprise Mobility Management (EMM) software like Microsoft Intune or AirWatch, etc. 


Configuration Details 


These configurations you need to publish/distribute along with the Qualys agent through 
MDM app store. 


1) Key: qenrollment config 
e Value Type: String 
e Value: It is a JSON which will include following attributes: 


e Server URL - You will get the Server URL information on the portal. Navigate to 
Configurations tab » Organization Info » Summary » View Enrollment Details 


e Username - You will get the details of all usernames on the portal in the Users 
tab. 


e Password - You can change the password in bulk through bulk action Change 
Password' or you can change the password of the individual user through 
quick action > Change Password’ action. 


e JSON example 
("ServerUrl":"qualysguard.qg2.apps.qualys.com/sem/dc/e/90428","Use 
rname":"jvdWqpt+tvXFT+i11D0rbiDNA==","Password":"abc@123"} 

This is a mandatory key for the auto-enrollment. 


Following are the additional Keys of the configurations which are optional and configure 
them to uniquely map the devices enrolled in Qualys with your MDM. Due to the 
limitation of the Google for Android devices running ion above 7 agent is not able to get 
unique hardware identifier of the devices like IMEI, Serial Number, and UDID. Also, the 
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Automated Enrollment 


same case with Apple. By adding these keys, you can uniquely map the devices enrolled in 
Qualys with your MDM. Please make sure you enter correct data. If you entered any 
incorrect data, then the only way to correct is by de-enrolling and re-enrolling the 
device with correct data. 


2) Key: IMEI 
e Value Type: String 


e Value: Enter the 15 digits IMEI of the device or you may use the tokens if your 
MDM's supports. Only alphanumeric values are allowed. 


Note: For Android devices running version below 7, agent can get the IMEI and in this case, 
the IMEI value will be overwritten by the value which agent gets from the device, and for 
the rest Android devices the value you entered will be set. 10S, the value you entered will 
be set, please make sure you enter correct IMEI numbers. 


3) Key: Serial Number 
e Value Type: String 


e Value: Enter the serial number of the device or you may use the tokens if your 
MDM's supports. Only alphanumeric values are allowed. 


Note: For Android devices running version below 7, agent can get the Serial Number and, 
in this case, the Serial Number value will be overwritten by the value which agent gets 
from the device and for rest Android devices the value you entered will be set. For 10S, the 
value you entered will be set, please make sure you enter correct Serial Numbers. 


4) Key: UDID 
e Value Type: String 


e Value: Enter the UDID of the device or you may use the tokens if your MDM's 
supports. You may use the MDM device ID here. Only alphanumeric and '- values 
are allowed. 


Note: For all Android and 10S devices, the value you entered will be set for the UDID field, 
please make sure you enter correct UDID. 


Automated Enrollment Guides 
- Android Enrollment 
-10S/iPadOS Enrollment 


- Chrome Enrollment 
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Android Enrollment 


Step 1 


Automated Enrollment 


Admin can distribute the Qualys Cloud Agent for Android from the MDM app store. 


For your reference, here are the instructions on distribution of Qualys Cloud Agent. 


- Configuring Qualys Cloud Agent enrollment details with Airwatch 


- Configuring Qualys Cloud Agent enrollment details with Intune 


Once the Agent is successfully distributed, you need to launch the Agent (app you just 
downloaded). You will be prompted with the following screen. Tap Ok to allow usage 


access to Qualys MDM agent. 


Once access is allowed, press back button of phone to continue the enrollment process 
and follow the instructions to allow other required permissions. Tap Next to continue. 


Allow Usage Access 


QAgent needs access to your app 
usage to detect the app compliance 
and better functionality of QAgent. 
We value your privacy. 


Click OK to go to Settings. Then turn 
on Usage Access for QAgent, press 
back to continue the enrollment 
process, 


QAgent solution secures, monitors, manages and supports 
mobile devices deployed across various platforms, service 
providers and enterprises 


QAgent enables the enterprises to securely manage the 
devices. 


To start the enrollment process tap on "Next" button, 
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Automated Enrollment 


Step 2 
Qualys Cloud Agent will automatically fetch the configurations published through MDM 
app store. 


If EULA is not configured for your organization, you will be redirected to step 3. If EULA is 
configured and you have already accepted it, then you will be redirected to step 3, else you 
will be presented with a EULA. If you decline the EULA, you will not be able to enroll the 
device. 


Step 35 


If your organization has set Default Ownership, then Device Ownership drop-down will be 
read-only. Otherwise you will need to select the Device Ownership. 


If the device is owned by Organization, select Corporate - Owned. If it is not owned by 
Organization, select Employee - Owned. 


Enter your phone number in the space provided if mandatory by your Admin. 


© Qualys. 


Choose your Device Ownership 


Device Ownership 
Corporate - Owned x 


Note: Device Ownership cannot be changed once Device rs enrolled. 


Fhone Humber 


Mates; 

- Enter the phone number of the device being enrolled. For Wi-Fi only 
device, enter your persona phone number 

if your country iS ngi listed imn country code dropaewn, then select 


Other as onion and please specify the eountry code Starling with “+ in 
Phone Humber held 
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Automated Enrollment 


Step 4 


Once your device is successfully configured with your Organization server, you'll be 
redirected to the following screen. 


(9) Qualys. 


OnePlus 6T 


Corporate - Owned 


Configuration 
Messages 
Support 
Legal 


Permissions Checklist 


Vv Vv WV VY VY VY YW 


Patch Jobs 


VOR O el 


V 2.3 (56) © Qualys, Inc. All rights reserved | 


iOS/iPadOS Enrollment 

Step 1 

Admin can distribute the Qualys Cloud Agent from the MDM app store. 

For your reference, here are the instructions on distribution of Qualys Cloud Agent. 
- Configuring Qualys Cloud Agent enrollment details with Airwatch 

- Configuring Qualys Cloud Agent enrollment details with Intune 


Once the Agent is successfully distributed, you need to launch the Agent (app you just 
downloaded). Follow the instructions to allow other required permissions. 
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Automated Enrollment 


Step 2 


Qualys Cloud Agent will automatically fetch the configurations published through MDM 
app store. 


If EULA is not configured for your organization, you will be redirected to step 3. If EULA is 
configured and you have already accepted it, then you will be redirected to step 3, else you 
will be presented with a EULA. If you decline the EULA, you will not be able to enroll the 
device. 


© Qualys. Close 
e 


Accept EULA Add Details 


End User License Agreement 


Please read through and agree to the End User 
License agreement to proceed. 


System EULA 


My Company (change this) grants you a revocable, 
nonexclusive, nontransferable, limited license to 
download, install and use the Application solely for 
your personal, noncommercial purposes strictly in 
accordance with the terms of this Agreement. 


Restriction: 

You agree not to, and you will not permit others to: 

a) license, sell, rent, lease, assign, distribute, transmit, 
host, outsource, disclose or otherwise commercially 
exploit the Application or make the Application 
available to any third party. The Restrictions section 
is for applying certain restrictions on the app usage, 
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Automated Enrollment 


Step 35 


If your organization has set Default Ownership, then the respective Device Ownership 
radio button will be selected, and both the radio button will be read-only. Otherwise, you 
will need to select Device Ownership. 


If the device is owned by organization, select Corporate - Owned and if not, select 
Employee - Owned. 


Enter your mobile number in the space provided if itis mandatory by your Admin. 


| © Qualys. Close 
D — — ——6 


Accept EULA Add Details 


Details 


Select Ownership 
Corporate - Owned Employee - Owned 


Note: Asset Ownership cannot be changed once 
asset is enrolled. 


Mobile Number 
mam IND+91 + 
Notes: 


- Enter the mobile number of the devices being 
enrolled. For Wi-Fi only devices, enter your personal 
mobile number. 


- If your country is not listed in country code 
dropdown, then select Other as option and please 
specify the country code starting with '+' in phone 
number field. 
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Automated Enrollment 


Step 4 
After launching QAgent, you will be redirected to following screen. 


Qualys. 


w^ Contacting Server 
w^ Generating CSR 
7 Downloading Certificate 


.* Securing your device 
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Automated Enrollment 


Step 5 
This completes device enrollment and you'll see the following screen. 


© Qualys. 


iPhone 

IPhone 8 
i05-11.2.5 
Corporate - Owned 


a Server 


a Data Usage 


ffi] Legal 


Chrome Enrollment 

Step 1 

Admin can distribute the Qualys Cloud Agent for Android from the MDM app store. 
For your reference, here are the instructions on distribution of Qualys Cloud Agent. 
- Configuring Qualys Cloud Agent enrolment details with Airwatch 

- Configuring Qualys Cloud Agent enrollment details with Intune 


Once the Agent is successfully distributed, you need to launch the Agent (app you just 
downloaded). You will be prompted with the following screen. Tap Ok to allow usage 
access to Qualys MDM agent. 
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Automated Enrollment 


Once access is allowed, press back button of phone to continue the enrollment process 
and follow the instructions to allow other required permissions. Tap Next to continue. 


Allow Usage Access 


QAgent needs access to your app usage to detect the app compliance and better 
functionality of QAgent. We value your privacy 


Click OK to go to Settings. Then turn on Usage Access for QAgent, press back to 
continue the enrollment process. 


"MSNMOGN,M EE. @ © ovinz 


Step 2 


If EULA is not configured for your organization, you will be redirected to step 3. If EULA is 
configured and you have already accepted it, then you will be redirected to step 3, else you 
will be presented with a EULA. If you decline the EULA, you will not be able to enroll the 
device. 
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© 


End User License Agreement (EULA) 


Name:Eula configuration 


Description: 
Test EULA configuration 


Step 3 


ACCEPT 


DECLINE 


Automated Enrollment 


If your organization has set Default Ownership, then Device Ownership drop-down will be 


read-only. Otherwise, you will need to select the Device Ownership. 


If the device is owned by Organization, select Corporate - Owned. If it is not owned by 


Organization, select Employee - Owned. 
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Automated Enrollment 


Enter your phone number in the space provided. 


© Qualys. 


Choose your Device Ownership 


Device Ownership 


Corporate - Owned Y 
Note: Device Ownership cannot be changed once Device is enrolled 


Phone Number 


= IND +91 ~ 


Notes 
- Enter the phone number of the device being enrolled. For Wi-Fi only device, enter your personal phone number. 


- If your country is not listed in country code dropdown, then select Other as option and please specify the country code starting with ‘+ in Phone Number field 


Next » 


COS à O F 0401 


Step 4 


Once your device is successfully configured with your Organization server, you'll be 
redirected to the following screen. 


© Qualys. 


Chromebook_0B8D 

mahesh » 
Corporate - Owned 

Messages » 


"Tu 
PW] Support > 


Legal > 


= Permissions Checklist > 


© 2021 Qualys, Inc. All rights reserved 


@ = (2A di" ny, 
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Appendix 
Configuring Qualys Cloud Agent enrollment details with Airwatch 


Appendix 


Configuring Qualys Cloud Agent enrollment details with 
Airwatch 

Adding Qualys Cloud Agent 

To configure, user must first add the Qualys Cloud Agent for: 

- Android (Same agent 1s used for Chrome) 

- IOS 

Adding Qualys Cloud Agent for Android (or Chrome) app with Google Play Integration 


The following instruction apply if you set up Google Play Integration with your AirWatch 
account. If you don't have this integration, you can Visit the Air Watch support site for 
more information. 


1) Open AirWatch. 
2) Click Add » Public Application. 


Admin 


I" e |; = & DA T. 
Compliance Policy 


Content 

Profile 
| Internal Application 
e 
iur Public Application 


3) Enter the following information: 
- Platform: Select Android 
- Source: Select Search App Store 


- Name: Enter "Qualys" to search the Google Play Store for the Qualys Agent for Android 
app 
4) Click Next. 
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Appendix 
Configuring Qualys Cloud Agent enrollment details with Airwatch 


5) Click the Qualys Agent for Android app from the Google Play Store. 
6) Click Approve and follow the on-screen prompts to add the app. 
Adding Qualys Cloud Agent for iOS app 

1) Open AirWatch. 

2) Click Add » Public Application. 


User 


Compliance Policy 


Content 
Profile 


Internal Application 


Public Application 


3) Enter the following information: 

- Platform: Select Apple 1OS. 

- Source: Select Search App Store. 

- Name: Enter "Qualys" to search the Apple Play Store for the Qualys Agent. 
4) Click Next. 


5) Click Select in front of Qualys Agent app from the Apple Play Store and follow the on- 
screen prompts to add the app. 
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Appendix 
Configuring Qualys Cloud Agent enrollment details with Airwatch 


Assigning the app to a group and applying a configuration 


1) Click Add Assignment. 


Qualys Agent - Assignment 


Details 
Platform: Apple Status: © Active 


Assignments Exclusions 


Devices will receive application based on the configurations below. Devices with multiple assignments will receive policies in priority 
order. Adjusting the priority for a single assignment will automatically reprioritize other assignments. Select the assignment to edit. 


Adding a new assignment will create a new rule at the bottom of the list. 


ADD ASSIGNMENT 


Assignment Name Description Smart Groups 


F 


Priority App Delivery Method EMM Managed Access 


No assignments found 


2) In the Assignment Groups field, select a group to apply the configuration to. 


Distribution 


Name * Qualys Enrollment Configuration 


Description 


Assignment 
Groups * 
All Devices(M712754648) X 


© on Demand 


App Delivery ©) Auto 
Method * 


3) Select Enabled to auto-configure the enrollment configurations for users. 
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Appendix 
Configuring Qualys Cloud Agent enrollment details with Airwatch 


For Android (or Chrome), set configuration as follows: 


Send Configuration © (i) 


Qualys Enrollment Configurations (CustomAttributel) 


For 1OS, set configuration as follows: 
Send Configuration 


UPLOAD XML | © 


Configuration Key Value Type Configuration Value 


qenrollment config String (CustomaAttribute!) 


4) Specify the configuration details as required. 


Note: Configuration details are mandatory. We recommend to use the configurable 
custom attributes of user to set the enrollment details for individual user. 


5) Click Add. 
6) Click Save and Publish to deploy the app. 


45 


Appendix 
Configuring Qualys Cloud Agent enrollment details with Intune 


Configuring Qualys Cloud Agent enrollment details with Intune 


Adding Qualys Cloud Agent 

To configure, user must first add the Qualys Cloud Agent for: 
- Android (Same agent 1s used for Chrome) 

- IOS 


Adding Qualys Cloud Agent for Android (or Chrome) app with Google Play Store 
integration 


The following instruction apply if you set up Google Play Integration with your Intune 
account. If you don't have this integration, you can Visit the Intune support site for more 
information. 


1) Sign in to the Microsoft 365 Device Management dashboard. 
2) Click Apps in the left-side panel. 
3) Click All Apps » Add. 


Home > Apps 


sss Apps | All apps 


ØP Search (Ctri+/ | + Add C) Refresh Y Filter + Export == Columns 


(i) Overview m 
# Search by name or publisher 


Bi Al apps 


^ 


Name T, Type 
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Appendix 
Configuring Qualys Cloud Agent enrollment details with Intune 


4) In the App Type drop-down menu, select Managed Google Play and click Select. 


Select app type 


Create app 


App type 
Managed Google Play app 


Managed Google Play app 


Search the built-in managed Google Play store to find and add apps for Android Enterprise 
devices. 


Learn more 


5) Search for "Qualys" and click Qualys Agent for Android > Approve. 


Adding Qualys Cloud Agent for iOS app 

1) Sign in to Microsoft 365 Device Management dashboard. 
2) Click Apps in the left-side panel. 

3) Click All Apps > Add. 


Home > Apps 


sss Apps | All apps 


|OSearch(ctri+) — | « + Add Č) Refresh Y Filter 


( Overview 


| À Search by name or publisher 


Hi AI apps 


Name 
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Appendix 
Configuring Qualys Cloud Agent enrollment details with Intune 


4) In the App Type drop-down menu, select 10S store app and click Select. 


Select app type X 


Create app 


iOS store app 


Search the built-in iOS App Store to find free apps for iOS devices. 


5) Search for "Qualys" and click Qualys Agent > Select and follow the on-screen prompts 
to add the app. 

Applying Configuration 

To apply configuration for: 

- Qualys Cloud Agent for Android (or Chrome) app 

- Qualys Cloud Agent for 10S app 


Assigning the Qualys Cloud Agent for Android (or Chrome) app to a group and 
applying a configuration 


1) Sign in to the Microsoft 365 Device Management dashboard. 

2) In the left pane, click Apps » App configuration policies. 

3) Click Add and select Managed devices. Enter the following information: 

- Name: Enter a display name to help identify the configuration. 

- Platform: Select Android. 

- Profile Type: Select the device profile type that this app configuration will apply too 
- Targeted app: Select Qualys Agent for Android. 

4) Click Next. 


5) In the Configuration settings format drop-down menu, select Use configuration 
designer, then click Add. 


6) Select the Qualys Enrollment Configuration key and click OK. 
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Appendix 
Configuring Qualys Cloud Agent enrollment details with Intune 


ah Use the JSON editor to configure the disabled configuration 
keys. 


© Kearch to filter items... 
m Configuration key Ty Value type Ty Description 


u Qualys Enrollment Co... string 


7) Specify the configuration details as needed. Make sure you don't leave it blank as it will 
prevent the auto-enrollment. 
V Basics © Settings 


Permissions 


Permissions granted here will override the “Default app permissions” policy for the selected apps. 


Learn more about Android runtime permissions 


Not configured 


Configuration Settings 
Configuration settings format © Use configuration designer v 


Use the JSON editor to configure the disabled configuration keys. 


Configuration key Value type Configuration value Description 


Qualys Enrollment Details string test config 


8) Click Next and follow the on-screen prompts to add the app configuration. 

Assigning the Qualys Cloud Agent for iOS app to a group and applying a configuration 
1) Sign in to the Microsoft 365 Device Management dashboard. 

2) In the left-side panel, click Apps » App configuration policies. 

3) Click Add and select Managed devices. Enter the following information: 

- Name: Enter a display name to help identify the configuration 

- Platform: Select 10S 


- Targeted app: Select Qualys Agent 
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Appendix 
Configuring Qualys Cloud Agent enrollment details with Intune 
4) Click Next. 


5) In the Configuration settings format drop-down menu, select Use configuration 
designer. 


6) Specify the configuration details as needed. Make sure you don't leave it blank as it will 
prevent the auto-enrollment. 


V Basics © settings 


Configuration settings format * © Use configuration designer v 


O Once the policy is created, the format cannot be changed 


Enter values for the XML property list. The values in the list will vary depending on the app you are configuring. Contact the 
supplier of the app to learn the values you can use. 


Learn more about XML property lists 


Configuration key Value type Configuration value 


qenrollment_config Y {'ServerUrl":"qualysguard.qg2.ap…. | *** 


| Select one A | | 


7) Click Next and follow the on-screen prompts to add the app configuration. 
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